v2.26.6

In This Release...

Beefed up our Content-Security-Policy headers with additional directives, further hardening the dashboard against cross-site scripting and injection attacks.
Fixed a bug where closing a window could knock out real-time updates for all your connected browser tabs. If you ever noticed service states going stale and had to do a full page refresh — that was this guy. Squashed!
Added logging for successful and failed login and logout events to improve authentication auditing and security visibility.
Added Subresource Integrity (SRI) hashes to externally-hosted stylesheets, so your browser can verify they haven't been tampered with before loading them.

May 13, 2026

Project creation can now be restricted to admins only, plus dependency updates across the stack.

May 4, 2026

Fixed browser notification prompts and improved preview list layout for long usernames. Better UX all around!

April 28, 2026

Improved release notes handling, dependency updates, added vulnerability audits to security CI, and enhanced testing coverage.

April 21, 2026

Security patch for fastify, legacy config cleanup, dependency updates, and Bitbucket API token authentication support added.

April 15, 2026

Updated API calls for Bitbucket user repositories.